AMENDMENT UNDER 37 C.F.R. §1.111 
U.S. Application No. 10/511,898 
Attorney Docket No. Q83178 

AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions and listings of claims in the 

application: 

LISTING OF CLAIMS: 

1 . (currently amended) A data processing device [[(1 )]] adapted to be installed in a 

data processing server [[(2)]] adapted to receive primary data and to transmit said primary data 
after application of dedicated processing based on primary rules by control means [[(5)]], which 
d e vic e i s charact e riz e d in that it compris e s comprising: 




[[i)]] a first table [[(Tl)]] storing sets of at least one primary rule, called "primary 
metarules", in a parameterizable form and in corresponding relationship to primary identifiers; 
and 

[[ii)]] management means [[(8)]] adapted to be coupled to said control means [[(5)]] and, 
on receipt of auxiliary data representing operating parameters delivered by said control means 
[[(5)]] after reception by the server [[(2)]] of secondary data, to select at least one of the primary 
identifiers in the first table [[(Tl)]] and associate said auxiliary data therewith so as to define said 
dedicated processes. 

2. (currently amended) A device according to claim 1 , characteriz e d in that it 
further comprises comprising a second table [[(T2)]] accessible to said management means 
[[(8)]] in which are stored secondary identifiers m-each jncorresponding relationship to at least 
one selected primary identifier associated with auxiliary data. 
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3. (currently amended) A device according to claim 2, characterized in that wherein 
said management means [[(8)]] are adapted, on receipt of said auxiliary data, to determine 
whether the at least one selected primary identifiers corresponding therete- to the type of said 
auxiliary data is present in the secondary dat atable [[(T2)]], so as and to associate therewith the 
at least one selected primary identifier with new auxiliary data int e nded so as to adapt said 
dedicated processes. 

4. (currently amended) A device according to claim 2, charact e riz e d in that wherein 
certain selected primary metarules in the second table [[(T2)]] are grouped into secondary 
metarules represented by secondary identifiers. 

5. (currently amended) A device according to claim 1, characteriz e d in that wherein 
said management means [[(8) i)]] comprise a multiplicity of management submodules each 
adapted to manage the association of auxiliary data with at least one primary or secondary 
metarule and [[ii)j] are adapted, on receipt of said auxiliary data, to determine which of said 
management submodules corresponds thereto. 

6. (currently amended) A device according to claim 2, charact e riz e d in that wherein 
said management means [[(8)]] are adapted, on receipt of said auxiliary data communicated by 
the server [[(2)]], to add, delete or modify primary or secondary metarules or auxiliary data in the 
second table [[(T2)]] associated with said primary or secondary metarules. 
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7. (currently amended) A device according to claim 1 , charact e riz e d in that wherein 
said management means [[(8)]] and said tables [[(Tl, T2)]] are part of a metafirewall adapted to 
manage a firewall equipping said server [[(2)]]. 

8. (currently amended) A firewall charact e riz e d in that it comprises comprising a 
device [[(1)]] according to claim 1. 

9. (currently amended) A data processing method consisting in applying dedicated 
processes based on primary rules to primary data received by a data processing server [[(2)]] so 
that the received primary data is processed before being transmitted by said server, which 
m e thod is charact e riz e d in that it comprises comprising: 

a preliminary step in which [[i)]] there are stored in a first table [[(Tl)]] sets of at least 
one primary rule, called "primary metarules", in a parameterizable form and in corresponding 
relationship to primary identifiers; and 

[[ii)]] on receipt of auxiliary data representing operating parameters delivered by the 
server [[(2)]] after the receipt of secondary data, at least one of the primary identifiers in the first 
table [[(Ti)]] is selected and said auxiliary data is associated with said primary identifier so as to 
define said dedicated processes. 

10. (currently amended) A method according to claim 9, characteriz e d in 
that wherein during the preliminary step, secondary identifiers each in corresponding relationship 
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to at least one selected primary identifier associated with auxiliary data are stored in a second 
table [[(T2)]]. 

1 1 . (currently amended) A method according to claim 10, characterized in that, 
wherein on receipt of the auxiliary data, it is determined if- whether the at least one selected 
primary identifiers that corresponds to it the type of the auxiliary data are-is present in the second 
table [[(T2)]], se-asand to associate th e r e with the at least one selected primary identifier with 
new auxiliary data adapt e d so as to adapt said dedicated processes. 

12. (currently amended) A method according to claim 10, characterized in 
that wherein certain primary metarules in the second table [[(T2)]] are grouped into secondary 
metarules represented by secondary identifiers. 

13. (currently amended) A method according to claim 9, charact e rized in that wherein 
there are executed in parallel [[i)]] the selection of the primary or secondary metarules in the first 
table [[(Tl)]] and [[ii)]] the modification of the auxiliary data in the second table [[(T2)]] 
associated with the secondary identifier representing the selected primary or secondary 
metarules. 

14. (currently amended) A method according to claim 9, charact e rized in 
that wherein on receipt of complementary data communicated by said server [[(2)]], primary or 
secondary metarules are added to, deleted from or modified in the second table [[(T2)]]. 

15. (new) A network data processing device, comprising: 
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a network data processing module; and 

a management module coupled to said network data processing module, said 
management module comprising a first memory containing a first table, said first table being 
adapted to contain primary identifiers associated with at least one parameterized rule for 
providing direction to said network data processing module when one or more of (a) said 
primary identifiers and (b) said at least one parameterized rule are associated with at least one 
parameter value; 

wherein said network data processing module, in response to receiving said direction, 
manages network data according to said direction. 

16. (new) A device according to claim 15, said management module further 
comprising a second memory containing a second table, said second table being adapted to 
contain secondary identifiers associated with at least one of said primary identifiers and one or 
more respective parameter values. 

17. (new) A method of processing network data, comprising: 

storing as entries in a first table, primary identifiers, each with one or more associated 
parameterized rules; 

receiving data comprising at least one parameter value; and 

making a determination whether said parameter value can be associated with an existing 
one of the entries in said first table; 
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when the determination is affirmative, making a combination of said parameter value and 
said associated parameterized rules, and communicating said combination to a network data 
processing module so as to direct said network data processing module. 

1 8. (new) A method of processing network data, comprising: 

storing as entries in a first table, first primary identifiers, each with one or more 
associated parameterized rules; 

storing as entries in a second table, secondary identifiers, each with one or more 
associated second primary identifiers and one or more associated parameter values; 

receiving data comprising at least one new parameter value; 

determining at least one associable second primary identifier which said new parameter 
value can be associated with; 

storing said new parameter value in association with said associable second primary 
identifier; 

determining current associated parameter values and corresponding parameterized rules 
for each of said secondary identifiers; 

making a combination said current associated parameter values and said corresponding 
parameterized rules for directing said network data processing module; and 

communicating said combination to a network data processing module so as to direct said 
network data processing module. 
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